That's a wrap on Hacker Summer Camp 2026. @BlackHatEvents USA and @defcon 34 delivered exactly what this week always does. From delivering our flagship training, to the energy of the Recon Village at the DEF CON, to every hallway chat and coffee catch-up in between, this week reminded us why we love being part of this community. To everyone who attended our sessions, stopped by to say hi, or just shared a moment with the RedHunt Labs team, thank you. Until next time. @upgoingstar @Sudhanshu_C @0xCardinal #BlackHatUSA2026 #DEFCON34 #HackerSummerCamp #RedHuntLabs #ReconVillage #CyberSecurity #InfoSec #CTEM

Day 1 of our flagship training, "Offensive Recon: AI Exposures & Modern Attack Surfaces," kicked off strong at Black Hat USA 2026. Now stepping into Day 2, and we're just as excited to keep the momentum going. A room full of security professionals, engineers, and red teamers, all diving deep into how AI features are quietly expanding attack surfaces and what it actually takes to find those exposures before attackers do. If you're around the event, scan the QR code and pick a slot, or just walk up and say hi. More from the training floor soon. @upgoingstar @Sudhanshu_C @0xCardinal #BlackHatUSA2026 #OffensiveSecurity #AttackSurfaceManagement #AISecurity #CTEM #RedHuntLabs #CyberSecurity #InfoSec

The badges are on, and Shubham Mittal (@upgoingstar), @Sudhanshu_C and Ashwin (@0xCardinal) from team RedHunt Labs team is walking the floor at one of the biggest weeks in cybersecurity. If you're at @BlackHatEvents USA 2026 between 1-6 August, come say hi. We'd love to talk shop, whether that's attack surface management, offensive recon, AI exposures, or just trading war stories from the conference floor. Scan the QR code and pick a slot for a quick 1:1 session. Grab a slot here: calendly.com/redhuntlabs/let… See you around the halls. #BlackHatUSA2026 #RedHuntLabs #CyberSecurity #InfoSec #AttackSurfaceManagement #CTEM #PTaaS

Attackers don't wait for your asset inventory to catch up. Neither should your recon. That's exactly what we're going deep on at @BlackHatEvents USA 2026. Introducing "Offensive Recon: AI Exposures & Modern Attack Surfaces" a hands-on training built for people who want to think like attackers, not just read about them. Registration link: blackhat.com/us-26/training/… Meet the team taking you through it: · Shubham Mittal (@upgoingstar), Director at RedHunt Labs. · Sudhanshu Chauhan (@Sudhanshu_C), Director at RedHunt Labs. · Kumar Ashwin (@0xCardinal), Security Engineer at RedHunt Labs. Together, they've trained and spoken at BlackHat, DEFCON, Nullcon, c0c0n, BSides, AppSec EU, and more. This is the kind of lineup you don't get to learn from every day. Seats are limited. We look forward to seeing you at Black Hat USA 2026. #BlackHatUSA #BlackHat2026 #OffensiveSecurity #ASM #CTEM #RedTeam #AIExposures #SecurityResearch

What we’ve learned about testing Rust for security, now available as a Testing Handbook chapter. We also released rust-review, a plugin for automated Rust security reviews, co-built with @AptosLabs. blog.trailofbits.com/2026/07…

Mini Shai-Hulud is back and it hits harder each time. 317 packages. 633 versions. One compromised maintainer account. size-sensor, echarts-for-react, timeago.js and the entire @antv scope. 15M+ monthly downloads collectively. analysis -> safedep.io/mini-shai-hulud-s… more details would be updated soon, analysis going on. stay tuned...

Black Hat Asia 2026, wrapped. ✅ It's always something special being in a room full of people who genuinely care about making the security space better. Great conversations, sharp minds, and a few sessions that genuinely made us think differently. Big thanks to everyone who stopped by and connected with our team. See you at the next one. #BlackHatAsia2026 #CTEM #AIExposure #RedHuntLabs #Cybersecurity

The response Shubham Mittal (@upgoingstar) got after his talk "No CVE for That" at @nullcon Goa 2026 was incredible and we didn't want it to stop there. We've put the full deck on SlideShare so the wider security community can make benefit from this research talk. Access the full deck here: slideshare.net/slideshow/no-… From exposed Ollama instances to leaked OpenAI keys to unauthenticated vector databases, the AI stack is the new attack surface, and most organizations have zero visibility into it. If you're building with AI, securing it, or advising teams that are, this one's for you and worth sharing. #AISecurity #CTEM #LLMSecurity #AIExposure #RedHuntLabs

Merry Christmas to the only community that understands that Santa is clearly one of us. Think about it: 1. He procrastinates for 364 days. 2. He pulls a global all-nighter fueled by sugar and deadline panic. 3. He completes the entire year's work in a manic 8-hour hyperfocus fugue state. He is the Patron Saint of Executive Dysfunction. We claim him. 🎄

In the sixth batch of community open source reviews, I checked out 8 awesome projects! ⚔️ - actsense by @0xCardinal - Indie UI by @alibey_10 - React Bits by @davidhaz - npm bet by @haydenbleasel - ElementSnap by @moumensoliman - react-icons-sprite by @jurerotar - Christmas Photo by @bargues_sofia - ReadmeBit by @najibdev Huge respect to everyone building cool stuff in the open! 💚 Next stream coming soon, submit yours review.orcdev.com You can also see all reviewed projects there. FOR THE HORDE! 🪓

I’ve been working on actsense (actsense.dev) — an open-source GitHub Actions auditor — and I’m really happy with how it’s coming together. It’s now public, so feel free to try it out, break it, share feedback, or even contribute. Here’s a sneak peek 👇 Cheers!

We had a fantastic time hosting the Command Line Heroes Bengaluru Edition this past Saturday! Big thanks to everyone who joined us, your questions and energy made the event special.

Kumar Ashwin, Independent Security Researcher now takes the stage on "Writing Production Grade Bash Scripts" #MeetupsatOne2N

Starting my day with @jayeshsch kicking off @cloudvillage_dc and it’s all so houseful !!!!

About to hit the stage and talk some crazy research findings at @nullcon - supply chain track 11 am, join me if you are around!

😮‍💨…and sometimes users accidentally push sensitive information into Git platforms which can be exploited by malicious actors Join @0xCardinal at #NullconGoa2025 to uncover security risks of dangling commits 👉 nullcon.net/goa-2025/speaker… #GitHub #GitLab #Bitbucket

really nice and elaborate research on leaving AWS canary at different places and the metrics are really something! worth a read! cybenari.com/2024/08/whats-t…

Reputation Farming in OSS Ecosystem! 🌱 Malicious actors boost their GitHub reputation by commenting or approving closed Pull Requests, discussions, or Issues they're not genuinely involved in 😱 ✍️Curated more details on my blog - krash.dev/posts/reputation-f…